Read the docs
Red Hat Security Advisory

RHSA-2015:0125

Red Hat JBoss Web Framework Kit 2.7.0 update

Released 2015-02-04 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 4 records

TI-2014-02817 CVE-2014-3490 · GHSA-qjpq-5pq3-43rr

RESTEasy 2.3.1 before 2.3.8.SP2 and 3.x before 3.0.9, as used in Red Hat JBoss Enterprise…

Priority MEDIUM 40

RESTEasy 2.3.1 before 2.3.8.SP2 and 3.x before 3.0.9, as used in Red Hat JBoss Enterprise Application Platform (EAP) 6.3.0, does not disable external entities when the resteasy.document.expand.entity.references parameter…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04572 Published 2014-08-19 Partial fix · 2.3.8.SP2, 3.0.9.Final CWE-266
TI-2014-02901 CVE-2014-3577 · GHSA-cfh5-3ghh-wfjx

org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before…

Priority LOW 38

org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject's Common…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.09189 Published 2014-08-21 Partial fix · 4.3.5 CWE-347
TI-2012-05114 CVE-2012-6153 · GHSA-2x83-r56g-cv47

http/conn/ssl/AbstractVerifier.java in Apache Commons HttpClient before 4.2.3 does not…

Priority LOW 29

http/conn/ssl/AbstractVerifier.java in Apache Commons HttpClient before 4.2.3 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.05844 Published 2014-09-04 Partial fix · 4.2.3 CWE-20
TI-2014-02882 CVE-2014-3558 · GHSA-845h-985r-jrqh

ReflectionHelper (org.hibernate.validator.util.ReflectionHelper) in Hibernate Validator…

Priority LOW 28

ReflectionHelper (org.hibernate.validator.util.ReflectionHelper) in Hibernate Validator 4.1.0 before 4.2.1, 4.3.x before 4.3.2, and 5.x before 5.1.2 allows attackers to bypass Java Security Manager (JSM) restrictions and…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02913 Published 2014-09-30 Partial fix · 4.2.1, 4.3.2 +1 CWE-264